<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cve-2026-4717 — CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/tags/cve-2026-4717/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata — refreshed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Tue, 24 Mar 2026 13:16:07 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/tags/cve-2026-4717/feed.xml" rel="self" type="application/rss+xml"/><item><title>Firefox Netmonitor Privilege Escalation Vulnerability (CVE-2026-4717)</title><link>https://feed.craftedsignal.io/briefs/2026-03-firefox-privesc/</link><pubDate>Tue, 24 Mar 2026 13:16:07 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-03-firefox-privesc/</guid><description>CVE-2026-4717 is a critical privilege escalation vulnerability in the Netmonitor component of Firefox, Firefox ESR, and Thunderbird, potentially allowing an attacker to gain elevated privileges on a vulnerable system.</description><content:encoded>&lt;p>CVE-2026-4717 is a critical vulnerability affecting Mozilla Firefox, Firefox ESR, and Thunderbird. The vulnerability lies within the Netmonitor component and can lead to privilege escalation. Specifically, Firefox versions prior to 149, Firefox ESR versions prior to 140.9, Thunderbird versions prior to 149, and Thunderbird ESR versions prior to 140.9 are affected. The vulnerability allows an attacker to potentially gain elevated privileges on the targeted system. This could allow for arbitrary…&lt;/p>
</content:encoded><category domain="severity">critical</category><category domain="type">advisory</category><category>privilege-escalation</category><category>firefox</category><category>thunderbird</category><category>cve-2026-4717</category></item></channel></rss>